EUVD-2010-4991

Malware in sbrugna...

EUVD-2010-4990

Malware in sbrugna...

Science Fair In A Box - SQLi & XSS Vulnerability

No description provided by source...

CVE-2010-5026

SQL injection vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5027

Cross-site scripting XSS vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the type parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5026

SQL injection vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5027

The CVE-2010-5027 entry concerns a Cross-site scripting (XSS) vulnerability in the winners.php component of Science Fair In A Box (SFIAB) versions 2.0.6 and 2.2.0. The attack vector involves the type parameter, allowing remote attackers to inject arbitrary web script or HTML. Affected product: Sc...

CVE-2010-5026

SQL injection vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5027

Cross-site scripting XSS vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the type parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5026

The vulnerability described across sources is a SQL injection in the Scientific project Science Fair In A Box (SFIAB), specifically in winners.php for versions 2.0.6 and 2.2.0. The root cause is unsanitized input in the type parameter, enabling remote attackers to execute arbitrary SQL commands. ...

Science Fair In A Box SQL Injection / Cross Site Scripting

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Science Fair In A Box SQLi & XSS Vulnerability Version:2.0.6 Price:Free Vendor url:http://www.sfiab.ca/ Published: 2010-06-09 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue™®, S1ayer,d3c0d3r and to all ICW members Science Fair In...

Science Fair In A Box - SQL Injection Cross-Site Scripting

Science Fair In A Box - SQL Injection Cross-Site Scripting Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Science Fair In A Box SQLi & XSS Vulnerability Version:2.0.6 Price:Free Vendor url:http://www.sfiab.ca/ Published: 2010-06-09 Greetz to:Sid3^effects, MaYur, M4n0j, Dark...

Science Fair In A Box XSS / SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================= Science Fair In A Box XSS / SQL Injection Vulnerability ======================================================= Author: L0rd CrusAd3r aka VSN email protected Exploit Title: Science Fair I...

Science Fair In A Box - SQL Injection / Cross-Site Scripting

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Science Fair In A Box SQLi & XSS Vulnerability Version:2.0.6 Price:Free Vendor url:http://www.sfiab.ca/ Published: 2010-06-09 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue™®, S1ayer,d3c0d3r and to all ICW members Science Fair In...